Senior Privacy Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• This position will aid the Company's privacy and data protection initiatives by collaborating with members of the Compliance department and various cross-functional teams to implement, sustain, and oversee compliance efforts related to privacy.

• Perform privacy impact assessments (PIAs), data protection impact assessments (DPIAs), and associated risk evaluations to assess the collection, usage, storage, and sharing of personally identifiable data.

• Assist in addressing Data Subject Requests and other privacy-related inquiries.

• Identify and evaluate privacy risks linked to new and existing products, technologies, and business processes, and propose strategies for mitigation.

• Investigate, record, and monitor routine privacy incidents promptly and thoroughly, documenting and reporting trends.

• Respond to, track, and document privacy inquiries in a timely manner, seeking guidance as needed from the Sr. Manager, Data Privacy.

• Support the development and execution of the privacy program and policies as required to establish and uphold an effective privacy framework.

• Work alongside cross-functional teams to advocate for privacy-by-design principles and ensure the integration of privacy requirements into projects from the outset.

• Conduct regular and targeted audits of electronic medical records and other electronic systems to identify and report any inappropriate uses and disclosures of sensitive information.

• Aid in crafting comprehensive responses to privacy and security surveys and questionnaires requested by other program areas.

• Carry out additional duties as assigned to further team and organizational objectives.

• Adhere to all company policies, procedures, and relevant regulatory requirements.

⛳️ Requirements

• Bachelor’s degree in Healthcare Administration, Business Administration, Public Health, Computer Science, or a related discipline.

• 2-4 years of experience in healthcare privacy compliance.

• Proven knowledge and comprehension of all federal, state, and international laws governing the management of protected health information (PHI) and personally identifiable information (PII).

• Preferred: Certification in Healthcare Privacy Compliance (CHPC) or Certified Information Privacy Professional (CIPP/US).

• Experience with incident management workflows and EMR auditing tools.

• Familiarity with assessing or reviewing pertinent AI laws and regulations, including state-level AI disclosure requirements.

🏝️ Benefits

• N/A